[CGUYS] paypal phish

2007-10-05 Thread mike
Watch your paypal friends and neighbors. My wife just received a phishing
email claiming to be paypal but in fact took her to a very PP looking
website under the name pajpal.  We forwarded the email to paypal.

Mike



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



Re: [CGUYS] paypal phish

2007-10-04 Thread gerald
I received an offer from paypal to get a PayPal security key for $5.

I have security keys similar to these on my bank and stock accounts.

https://www.paypal.com/securitykey

I have been spoofed a large number of times by psuedo-PayPal emails, but never 
had an intruder that was noted.

I have had my eBay password blocked on four or five occasions, and had to 
change it, so I thought the security key to be a good thing, since PayPal=money.

At 05:23 PM 10/3/2007, you wrote:
Watch your paypal friends and neighbors. My wife just received a phishing
email claiming to be paypal but in fact took her to a very PP looking
website under the name pajpal.  We forwarded the email to paypal.

Mike



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived




* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



Re: [CGUYS] paypal phish

2007-10-04 Thread John Duncan Yoyo
They paypal security key is part of Verisign's open id program.  If
any of your other security keys are from Verisign you can use them
with paypal and vice versa rather than getting a dozen of the things.
The Paypal one is cheap at $5

You can learn more about the program from a Security Now podcast from
a month or so back.
http://www.twit.tv/sn107

And there is a podcasts on the pitfalls of open id at
http://www.twit.tv/sn111.

On 10/4/07, gerald [EMAIL PROTECTED] wrote:
 I received an offer from paypal to get a PayPal security key for $5.

 I have security keys similar to these on my bank and stock accounts.

 https://www.paypal.com/securitykey


-- 
John Duncan Yoyo
---o)



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



Re: [CGUYS] paypal phish

2007-10-04 Thread Judy Cosler
don't understand how this works.How does PayPal know what the 
security key is???


And, how did you get these for your bank and stock accounts?

gerald wrote:

I received an offer from paypal to get a PayPal security key for $5.

I have security keys similar to these on my bank and stock accounts.

https://www.paypal.com/securitykey

I have been spoofed a large number of times by psuedo-PayPal emails, but never 
had an intruder that was noted.

I have had my eBay password blocked on four or five occasions, and had to 
change it, so I thought the security key to be a good thing, since PayPal=money.

At 05:23 PM 10/3/2007, you wrote:
  

Watch your paypal friends and neighbors. My wife just received a phishing
email claiming to be paypal but in fact took her to a very PP looking
website under the name pajpal.  We forwarded the email to paypal.

Mike



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived






* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



  




* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



Re: [CGUYS] paypal phish

2007-10-04 Thread John Duncan Yoyo
The security key creates password numbers using a clock in the key and
algorithm that makes random looking non random numbers based on the
time.   These numbers are unique to your key and your account.  Every
30 seconds you have a new one off pass-number that you use in
conjunction with a password and your login.  Versisign(I think)
compares your number with the one it expects you to have based on your
assigned key.

If anyone steals that number they only have thirty seconds to use it.
Pretty darn secure by my standards although people differ.

Listen to the podcasts I mentioned earlier for a better explanation.

On 10/4/07, Judy Cosler [EMAIL PROTECTED] wrote:
 don't understand how this works.How does PayPal know what the
 security key is???

 And, how did you get these for your bank and stock accounts?

 gerald wrote:
  I received an offer from paypal to get a PayPal security key for $5.
 
  I have security keys similar to these on my bank and stock accounts.
 
  https://www.paypal.com/securitykey
 
  I have been spoofed a large number of times by psuedo-PayPal emails, but 
  never had an intruder that was noted.
 
  I have had my eBay password blocked on four or five occasions, and had to 
  change it, so I thought the security key to be a good thing, since 
  PayPal=money.
 
  At 05:23 PM 10/3/2007, you wrote:
 
  Watch your paypal friends and neighbors. My wife just received a phishing
  email claiming to be paypal but in fact took her to a very PP looking
  website under the name pajpal.  We forwarded the email to paypal.
 
  Mike
 
 
  
  * == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
  * == the body of an email  send 'em to: [EMAIL PROTECTED] ==
  * Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
  * Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
  * Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
  * New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
  * Need more help? Send mail to: [EMAIL PROTECTED]
  
  * List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
  * RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
  * Messages bearing the header X-No-Archive: yes will not be archived
  
 
 
 
  
  * == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
  * == the body of an email  send 'em to: [EMAIL PROTECTED] ==
  * Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
  * Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
  * Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
  * New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
  * Need more help? Send mail to: [EMAIL PROTECTED]
  
  * List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
  * RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
  * Messages bearing the header X-No-Archive: yes will not be archived
  
 
 
 


 
 * == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
 * == the body of an email  send 'em to: [EMAIL PROTECTED] ==
 * Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
 * Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
 * Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
 * New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
 * Need more help? Send mail to: [EMAIL PROTECTED]
 
 * List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
 * RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
 * Messages bearing the header X-No-Archive: yes will not be archived
 



-- 
John Duncan Yoyo
---o)



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at 

Re: [CGUYS] paypal phish

2007-10-04 Thread Roger D. Parish

At 12:33 PM -0500 10/4/07, Judy Cosler wrote:

don't understand how this works.How does PayPal know what 
the security key is???


Each key has an external unique serial number, which you must supply 
the first time you use the key to sign on. After that, they know from 
your user id what your fob should be showing. And, they allow for 
drift in the time-keeping mechanism by keeping the previous and 
next numbers to be generated available, and matching your entry to 
them. They can then tell how accurately your fob is keeping time. 
This was discussed on the Security Now podcast a few weeks back.

--
Roger
Lovettsville, VA



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



Re: [CGUYS] paypal phish

2007-10-03 Thread Judy Cosler

I frequently get phishing emails from paypal

mike wrote:

Watch your paypal friends and neighbors. My wife just received a phishing
email claiming to be paypal but in fact took her to a very PP looking
website under the name pajpal.  We forwarded the email to paypal.

Mike



* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived



  




* == QUICK LIST-COMMAND REFERENCE - Put the following commands in  ==
* == the body of an email  send 'em to: [EMAIL PROTECTED] ==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]

* List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/
* RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml
* Messages bearing the header X-No-Archive: yes will not be archived